Multi-Supplier Framework for the Provision of Network Penetration Testing Services

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

National Transport Authority_1149 ran this procurement for “Multi-Supplier Framework for the Provision of Network Penetration Testing Services” as an operational contract requiring implementation and sustained service execution. The extracted pack showed qualification-stage material with references to later ITT technical depth; practical activity therefore centred on building, integrating, and operating the specified service stack with compliant reporting and handover obligations where stated. Constituent activities and named work elements in the supplied extracts:

• Title: Multi-Supplier Framework for the Provision of Network Penetration Testing Services
• SPECIFICATIONS OF SERVICE REQUIREMENTS
• Services. Any costs associated with the submission of a Tender are the sole responsibility of the
• ultimate decision of the Authority in relation to the award of the contract for the Services (the
• documentation executed, or which may be executed, in relation to the Services. No legal relationship
• any of the Tenderers to undertake the Services and the Authority reserves the right not to proceed
• or the Services including, without limitation, the information made
• or the Services including, without limitation, the information made available in response to any
• integration of transport and land use planning in the Greater Dublin Area, reflecting the particular
•  Procure public transport services by means of public transport services contracts;
•  License public bus passenger services that are not subject to a public transport services
• service vehicles (taxis, hackneys and limousines) and their drivers; Non-binding monetary references in the source were treated as context only and were not used as qualification thresholds.

3. Background & buyer context

The buyer context reflected a formal Irish public-procurement route, with pre-qualification used to control entry into the tender stage.

• any substitute for the underlying documentation (whether existing or to be concluded in the future),
•  Manage the Rural Transport Programme and the successor structure of Transport Co
•  Planning and funding of sustainable transport projects in the regional cities of Cork,
•  Administration of the Smarter Travel Workplaces programme;

4. Eligibility & selection criteria

• Turnover requirement — — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.
• Insurance — — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.
• Certifications — not specified for this tender
• Past experience — not specified for this tender
• Personnel — not specified for this tender
• Geographic / facility constraints — not specified for this tender Additional binding lines surfaced in the deterministic extract:
• — use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.
•  The evidence of a minimum annual turnover of €250,000 per annum for the last three audited fi
• The evidence of a minimum annual turnover of €250,000 per annum for the last three audited fin
• Turnover: Tenderers are required to provide evidence, satisfactory to the Authority, of a minimum annual turnover of €250,000 per annum for the last three audited fin

5. Award criteria & scoring

6. Submission requirements

• Method statement / response document (template/page limits) — not specified in extract.
• CVs (page count, named roles) — not specified in extract.
• Pricing schedule (format/template) — expected at ITT stage.
• Case studies (number/value range) — client references/comparable project evidence was referenced.
• Declarations (ESPD/Bona Fides/Tax/COI) — ESPD/declaration/statement-of-confirmation language was present.
• Mandatory site visit — not specified in extract.
• Submission portal and formatting — eTenders portal and PDF electronic copies were referenced. Submission-related source lines:
• queries and /or requests should be submitted not later than 10 days prior to the
• queries and /or requests should be submitted not later than 10 days prior to the date for return of Tenders
• [RFT- FW for Network Pen Testing.pdf] National Transport Authority
• information for entities wishing to submit Tenders in response to this competition for the appointment
• [RFT- FW for Network Pen Testing.pdf] Tenderers shall inform themselves concerning, and shall
• [RFT- FW for Network Pen Testing.pdf] inviting a Tenderer to proceed further;

7. Key dates & process

8. Contract terms that matter

Contract duration in the extract: 6 months. Payment cycle, SLA/KPI schedule, and penalty regime were not fully disclosed in the snippets unless listed below.

• VERIFIED PHRASES (deterministic regex extract from the documents — treat as authoritative for numerical claims)
• In consideration of the payment by the National Transport Authority of the sum of €1 (receipt
• expiry of at least 21 days written notice to terminate this tender
• 6 months from the closing date for receipt of Mi
• of Participants to a Multi-Supplier Framework for the Provision of Network Penetration Testing
• These Instructions are being made available by the Authority to Tenderers on the terms set out in
• promise as to the future. Any summaries or descriptions of documents or contractual arrangements
• documentation executed, or which may be executed, in relation to the Services. No legal relationship

9. Risks, red flags & unusuals

• Qualification gate: the deterministic extract included a turnover threshold line (— use these verbatim for insurance / turnover. If a category (insurance, turnover) has no entry here, treat it as 'not specified' for THIS tender.), which can materially narrow bidder pool composition.
• The two-step process (PQQ then ITT) shifted effort to compliance evidence early, with competitive scoring detail potentially deferred.
• Technical and contractual granularity appeared ITT-dependent, increasing ambiguity at qualification stage for non-incumbent bidders.

10. SME fit assessment

This competition looked most accessible to firms with established public-sector tender capability, documented financial capacity, and direct operational experience in the relevant service category.

• Credible bidder profile — mid-sized to large specialist with formal QA/compliance process.
• Consortium / sub-contracting — not clearly specified in extract.
• Indicative bid-prep effort — 6 to 12 working days for evidence collation, form completion, and review cycles at PQQ level.
• Pwin signal — strongest for bidders with reusable qualification artefacts, comparable references, and low-friction mobilisation capability.

11. Where to dig deeper

• Source RFT/PQQ filenames: RFT- FW for Network Pen Testing.pdf, RFT- FW for Network Pen Testing.pdf] National Transport Authority, SCHEDULE 1: FORM OF TENDER.
• eTenders CFT / notice reference: not specified in extract.
• Clarification contact / portal: eTenders message portal (email not surfaced in extract).
• Key attachments to prioritise: SCHEDULE 2: DATA PROTECTION NOTICE, RFT- FW for Network Pen Testing.pdf] Tenderers shall inform themselves concerning,, RFT- FW for Network Pen Testing.pdf] inviting a Tenderer to proceed further;.